On Windows and Mac, f.lux checks for updates automatically. On Windows, you may want to uncheck "Install updates automatically" and you will be prompted for each update and can skip it entirely.

If you have stronger need for security than that, you can block update checks at the firewall and still use f.lux. Most customers who need this are enterprise, and in the future we'll have options for users who need a higher level of control.

f.lux defaults to installing updates automatically, because when things go wrong with video drivers, f.lux can slow down your computer, and we like to be able to fix things like this quickly.

I would just like to say that I'm very much a power user and I have never had any problems with f.lux set to install updates automatically. You can look me up on www.overclock.net to see just how much of a power user I am. ;) Seriously, the updates are very very very non-invasive and you don't know that they've been done until one day you notice that the version number is higher than before.

If you have stronger need for security than that, you can block update checks at the firewall and still use f.lux.

So if anyone wants to use flux, he has to install a firewall, that is just great. I have checking for updates disabled and yet it keeps notifying about new versions, my mum does not know, what to do, so she always calls me. I use Windows Firewall with outbound allowed on it, obviously. I have it blocked on mine computer, still 90% of outbound requests are done by flux alone, very suspicious, malware like behaviour. I have reported it on a few security forums already. :/

f.lux does a daily update check, and if you ask it to prompt you, it will prompt only once per version.

Video drivers and operating systems are changing rapidly - in several ways f.lux has to respond to these low-level components of the system much more quickly than typical application software. We have been able to fix many problems this way that would cause big problems if we had no automatic update.

f.lux is not malware. We only update to our own signed and well-tested updates, so it's really inappropriate for you to report f.lux as malware. This is basically normal practice in 2017 (Spotify, Chrome, Dropbox, etc.) for apps that want to support their users well and keep working over a long period of time.